Avoid accidental sharing of access tokens

[soxofaan]

Lately I had a couple of user support cases where users accidentally shared their access tokens (sometimes even publicly), by sharing the extended http error view (as screenshot, or by copy-pasting the whole dump), e.g.

I think the web editor should obfuscate the authentication headers in this view.